Access your Orange Pi Debian from the Web

Make your Orange Pi (e.g. Zero) accessible from anywhere via the Yaler relay.

Prerequisites

Setting up your device requires a relay domain. Please sign up to get one.

Setting up the hardware

Make sure the Orange Pi is connected to the Internet via Ethernet or Wi-Fi (try wlan1, add allow-hotplug).

Installing YalerTunnel on Debian

Follow these steps to install YalerTunnel on the Orange Pi.

  1. Open a shell on your Orange Pi (default login is root, password orangepi), or type
    $ cd ~
  2. Update apt-get with
    $ sudo apt-get update
  3. Download and install libssl and gcc with
    $ sudo apt-get install libssl-dev
    $ sudo apt-get install build-essential
  4. Create a yalertunnel directory
    $ mkdir yalertunnel
    $ cd yalertunnel
  5. Download, unzip and build the YalerTunnel source
    $ curl -LO http://s3.yaler.net/yalertunnel/YalerTunnel2.src.tar.gz
    $ tar xfzmv YalerTunnel2.src.tar.gz
    $ ./configure && make
  6. Done. Now either enable Web access or SSH access.


Web access

Prerequisites

A Web server or service has been installed and is running on the Orange Pi.

Enabling Web access on Debian

How to configure YalerTunnel on your Orange Pi to make a local Web service accessible from anywhere.

  1. Download the yalertunnel.service startup script
    $ sudo curl -L http://s3.yaler.net/orangepi-debian/yalertunnel.service -o /lib/systemd/system/yalertunnel.service
  2. Create a symbolic link
    $ sudo ln -s /lib/systemd/system/yalertunnel.service /etc/systemd/system/multi-user.target.wants/yalertunnel.service
  3. Open the yalertunnel.service script with
    $ sudo nano /lib/systemd/system/yalertunnel.service
    Check the path (default: /root/yalertunnel), set the port of the local Web service (default: 80), and set your relay domain
    1 [Unit]
    
    7 ExecStart=/root/yalertunnel/yalertunnel server 127.0.0.1:80 try.yaler.io:80 RELAY_DOMAIN -min-listeners 1

    Save changes with CTRL-X, then Y, then RETURN. Do not change the local IP (default: 127.0.0.1), unless the Web service runs on a separate device in the same network.

  4. Reboot your Orange Pi to run the script
    $ sudo reboot
  5. Done. Now access your device from any Web browser or with Curl or from iOS or from Android (and resolve errors).

Disabling Web access on Debian

How to remove YalerTunnel to disable Web access from anywhere.

  1. Open a shell on your Orange Pi and type
    $ sudo systemctl stop yalertunnel.service
    $ sudo rm /etc/systemd/system/multi-user.target.wants/yalertunnel.service
    $ sudo rm /lib/systemd/system/yalertunnel.service
    $ sudo reboot


SSH access

Prerequisites

The SSH daemon sshd is running (per default) on the Orange Pi.

Enabling SSH access on Debian

How to configure YalerTunnel on your Orange Pi to allow SSH access from anywhere.

  1. Download the yalertunnel-ssh.service startup script
    $ sudo curl -L http://s3.yaler.net/orangepi-debian/yalertunnel-ssh.service -o /lib/systemd/system/yalertunnel-ssh.service
  2. Create a symbolic link
    $ sudo ln -s /lib/systemd/system/yalertunnel-ssh.service /etc/systemd/system/multi-user.target.wants/yalertunnel-ssh.service
  3. Open the yalertunnel-ssh.service script with
    $ sudo nano /lib/systemd/system/yalertunnel-ssh.service
    Check the path (default: /root/yalertunnel), set the port of the local SSH service (default: 22), and set your relay domain
    1 [Unit]
    
    7 ExecStart=/root/yalertunnel/yalertunnel proxy 127.0.0.1:22 try.yaler.io:80 RELAY_DOMAIN

    Save changes with CTRL-X, then Y, then RETURN. Do not change the local IP (default: 127.0.0.1), unless the SSH service runs on a separate device in the same network.

  4. Reboot your Orange Pi to run the script
    $ sudo reboot
  5. Done. Now access your device with Putty or with SSH (for Linux, Mac OS X).

Disabling SSH access on Debian

How to remove YalerTunnel to disable SSH access from anywhere.

  1. Open a shell on your Orange Pi and type
    $ sudo systemctl stop yalertunnel-ssh.service
    $ sudo rm /etc/systemd/system/multi-user.target.wants/yalertunnel-ssh.service
    $ sudo rm /lib/systemd/system/yalertunnel-ssh.service
    $ sudo reboot


Troubleshooting

How to fix common issues.


To enable Web and SSH access at the same time, or tunnel another protocol, please get in touch.


Creative Commons License This work by Yaler GmbH is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.